Wireshark · Ethereal-users: Re: [Ethereal-users] Decoding of new NAI sniffer timestamps.

["James V. Fields" <jvfields@xxxxxxx>]

David,

Please send me a sample trace along with a brief description of the
hardware platform.  We just switched to the S6040 last year and had some
wierdness with the timestamps for a while as well.

Starr, David wrote:
> If somebody wants to test with one of the new NAI distributed sniffer .cap
> files, just let me know & I'll package one up & get it to them....  I know
> it's hard to keep track of all the new hardware that's out there!   We just
> got them in & running this week......
>
> The delta time may be from the previous packet in this latest version...
> The first one I had installed, it was off by 1/3..  This version, it seems
> more likely that it's from the previous packet, instead of the first packet.
>
> Dave
>
>
>
>
>
>
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Guy Harris
> Sent: Wednesday, January 12, 2005 5:06 PM
> To: Ethereal user support
> Subject: RE: [Ethereal-users] Decoding of new NAI sniffer timestamps.
>
>
> Starr, David said:
>
> > However.....  Still has problems..   All of the timestamps show the date
> > "Jan 06" although the .cap file was created on "Jan 11".. Also, the 
> > delta time is way,way off.... The output shows a delta from first 
> > packet as 0.792777 & should be on the order of 1800. seconds.
>
>
> Presumably that's the delta of some packet other than the first packet from
> the first packet?  (Note that Ethereal doesn't display any deltas from the
> time the capture started, it only displays deltas from the first
> packet.)
>
>
> > I can supply some output from the sniffer to help with testing.
>
>
> "Output from the sniffer" in the sense of a .cap file?
>
> One of the .cap files with problems, and an indication of what the (date and
> time of day) time stamps for the packets in that file should be, would be
> helpful (and would possibly be necessary).
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users